This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa File: 3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa (raw, json) Hash identifier: Md/Lk9fbWqtR15Mq1SyOunk1RPVKcvFekvVZ3QgEGYY= Subject key identifier: 43:38:33:A8:07:AE:7E:83:40:34:2F:CC:92:BA:15:55:02:5F:72:2A Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 78E0FC145AF233CD27CEF5812469BD544F8D7E8B Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa Signing time: Wed 10 Dec 2025 06:01:24 +0000 ROA not before: Wed 10 Dec 2025 06:01:24 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d036::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e0:fc:14:5a:f2:33:cd:27:ce:f5:81:24:69:bd:54:4f:8d:7e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Dec 10 06:01:24 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=2a22388b1da318e3297474056bfcb4a8d59c9e360f3a933f111703302ca04fa5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:cd:4f:42:ca:07:16:62:4d:ab:f6:39:d8: cb:da:f5:e1:7e:0e:aa:c5:8a:84:8b:fd:34:b1:34: 67:9f:e0:b5:f9:47:de:1f:92:25:a2:93:ff:b6:fb: 4d:6c:37:09:8f:03:45:63:90:47:b1:3c:35:1a:b9: d6:f7:dd:98:a5:fc:2c:8a:12:dd:8f:26:99:72:10: 75:78:55:fc:09:66:bb:df:f3:43:77:f2:79:8b:75: f5:75:12:b3:10:24:76:0a:26:74:b9:83:a6:1c:87: 7d:9e:e5:0f:38:ea:29:b8:8e:f6:b9:ab:71:32:31: 58:0f:c0:36:67:bd:12:a8:f1:c5:05:50:ee:8e:d7: 9c:67:79:e0:39:de:f0:e9:78:b7:bc:e2:45:52:02: 77:1b:73:1e:7a:e8:bc:e6:dd:7a:36:78:88:c8:ff: 4b:c2:15:89:0a:8e:3c:a9:16:1b:97:15:e0:67:6e: fa:77:54:e0:8c:7f:ef:7b:f7:c1:eb:16:cd:7e:18: b9:aa:ed:21:2d:fc:00:1b:f3:66:40:70:29:3b:8a: 93:c0:2c:a8:33:e7:75:24:99:92:21:13:8b:70:eb: b0:66:30:8b:df:d1:c0:ce:d2:63:ec:a2:4c:cc:45: 5c:ef:f7:31:4f:9f:5c:2a:8a:c2:df:bd:84:54:71: 6c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:38:33:A8:07:AE:7E:83:40:34:2F:CC:92:BA:15:55:02:5F:72:2A X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d036::/32 Signature Algorithm: sha256WithRSAEncryption 49:3b:e2:8f:84:88:1a:4e:67:d4:66:ac:68:ee:b2:31:7a:c4: a1:f8:70:84:99:34:75:0a:d0:37:16:6a:2e:0d:33:aa:34:14: ac:07:02:71:df:02:20:5e:dd:d7:96:ef:37:07:83:a9:52:85: 71:e9:e6:44:23:41:f3:de:50:b5:d3:1c:bb:3e:76:05:e9:1d: 8e:ba:d0:ac:3f:d6:e8:bf:45:82:01:9b:f8:84:fc:3c:22:f4: 45:54:7a:2c:7c:aa:2b:39:1a:d7:4d:2d:ac:d3:30:fa:72:34: 83:a1:ec:b1:3b:40:dd:93:66:13:73:a2:bc:4a:dd:9a:d3:6f: 29:9f:ea:ff:be:d9:b5:97:10:90:24:73:30:cc:19:c1:5e:20: 1b:2f:fb:41:4d:90:3f:cb:79:65:c3:c2:f3:0f:bc:0a:c6:ae: 35:97:73:63:f3:3a:d9:6a:61:4a:2f:3c:84:dc:55:70:ef:fa: bb:50:12:4a:c0:84:5f:d3:e3:cc:45:35:f2:8d:93:28:7f:a5: b1:23:a3:d0:db:76:65:c5:a5:46:a6:35:b7:73:96:41:fe:b2: 7b:99:1c:25:fb:19:76:c9:e0:d7:60:9e:c7:d3:d4:ef:42:c6: 64:7b:63:fa:9f:1f:79:dc:7a:7e:86:e0:14:37:5d:8d:5a:11: 46:f9:3f:1a -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUeOD8FFryM80nzvWBJGm9VE+NfoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNTEyMTAwNjAxMjRaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDJhMjIzODhiMWRhMzE4ZTMyOTc0NzQwNTZiZmNiNGE4ZDU5YzllMzYwZjNh OTMzZjExMTcwMzMwMmNhMDRmYTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALtvzU9CygcWYk2r9jnYy9r14X4OqsWKhIv9NLE0Z5/gtflH3h+SJaKT/7b7 TWw3CY8DRWOQR7E8NRq51vfdmKX8LIoS3Y8mmXIQdXhV/Almu9/zQ3fyeYt19XUS sxAkdgomdLmDphyHfZ7lDzjqKbiO9rmrcTIxWA/ANme9EqjxxQVQ7o7XnGd54Dne 8Ol4t7ziRVICdxtzHnrovObdejZ4iMj/S8IViQqOPKkWG5cV4Gdu+ndU4Ix/73v3 wesWzX4YuartIS38ABvzZkBwKTuKk8AsqDPndSSZkiETi3DrsGYwi9/RwM7SY+yi TMxFXO/3MU+fXCqKwt+9hFRxbF8CAwEAAaOCAiIwggIeMB0GA1UdDgQWBBRDODOo B65+g0A0L8ySuhVVAl9yKjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv M2ExNWFmMzktNjgxOC00ZWViLWJiYWYtMjgzYjdiZmZmYmE5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF0DYw DQYJKoZIhvcNAQELBQADggEBAEk74o+EiBpOZ9RmrGjusjF6xKH4cISZNHUK0DcW ai4NM6o0FKwHAnHfAiBe3deW7zcHg6lShXHp5kQjQfPeULXTHLs+dgXpHY660Kw/ 1ui/RYIBm/iE/Dwi9EVUeix8qis5GtdNLazTMPpyNIOh7LE7QN2TZhNzorxK3ZrT bymf6v++2bWXEJAkczDMGcFeIBsv+0FNkD/LeWXDwvMPvArGrjWXc2PzOtlqYUov PITcVXDv+rtQEkrAhF/T48xFNfKNkyh/pbEjo9DbdmXFpUamNbdzlkH+snuZHCX7 GXbJ4NdgnsfT1O9CxmR7Y/qfH3ncen6G4BQ3XY1aEUb5Pxo= -----END CERTIFICATE-----Generated at Fri Jan 2 09:28:54 2026 by rpki-client